Data protection

The protection of your personal data is important to us.

In the following, we would like to inform you that we request personal data from you and that these are stored electronically. Your data will be stored and processed by us in compliance with the relevant provisions of national data protection laws, as well as the General Data Protection Regulation (GDPR).

Responsible within the meaning of the aforementioned regulations is:

Lars Denzer Promotions: Social Media and online marketing consulting
Candles Heimer Road 18
67307 Göllheim
Telephone:0151 - 28914770

E-Mail: info@followersheaven.de

I.General

1. Items

In order to ensure the readability and comprehensibility of our data protection declaration, We inform you in advance about basic terms used in the GDPR.

  • Personal Data

Personal data means any information relating to an identified or identifiable natural Person (hereinafter referred to as the" data subject"); a natural Person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an Online identifier or to one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural Person.

  • data subject

Data subject is any identified or identifiable natural Person whose personal data is processed by the controller.

  • Processing

Processing means any operation or series of operations carried out with or without the help of automated procedures in connection with personal data, such as Collection, Collection, Organisation, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of provision, reconciliation or linking, restriction, erasure or destruction.

  • Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

  • Profiling

Profiling is any form of automated processing of personal data that consists in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location of that natural person.

  • Pseudonymization

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not assigned to an identified or identifiable natural Person be.

  • Controller or controller responsible for processing

Controller or controller responsible for processing is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the member states, the controller or the specific criteria for its designation may be subject to Union law. or the law of the member states.

  • Processor

Processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

  • Recipient

The recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under union or member state law within the framework of a specific investigation mandate shall not be regarded as recipients.

  • Third-party

A third party is a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.

  • Consent

Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, indicates that he or she agrees to the processing of personal data concerning him or her.

  • Payment service

Payment service providers serve the processing of payments within the framework of contracts concluded by a data subject with the controller.

2. Type and scope of data collection

When you access our Website or when you access a file stored on our Website, data is collected and processed. In principle, this only happens if this is necessary for the provision of a functional Website as well as its contents and services. Furthermore, a collection and use of personal data is regularly carried out only after appropriate consent. An exception applies in such cases where the prior obtaining of consent from the processing of the data is not possible due to actual reasons and the processing of the data is permitted by legal regulations.

a. Legal basis for the processing of personal data

If the processing of personal data is carried out to fulfil the contracts concluded with us, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.

If we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR as the legal basis.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. C GDPR as the legal basis.

In the event that vital interests of the data subject or another natural Person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR as the legal basis for the processing.

b. Data deletion and storage duration

The personal data collected by US will be deleted as soon as the purpose of storage ceases to apply.

Storage takes place if this is provided for by a law, a regulation under Union law or other provisions.

Furthermore, a deletion takes place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

II. Own data collection via the Website

1. Cookies

a.Description and scope of data processing

Our Website uses Cookies. Cookies are text files that are stored on the visitor's computer system when you visit our Websites. Cookies contain a string of characters that allows the browser of the visitor to be identified when you visit our Website again. We use technically necessary Cookies that serve to make our offer more user-friendly, effective and secure.

The following data is stored and transmitted, for example, in the Cookies:

  • Items in your cart
  • Login Data
  • Language setting

The data obtained from this are pseudonymised by US. An assignment of the data to the visitor is therefore not possible. Furthermore, this data is not stored with other personal data.

You can set your Browser so that you are informed about the setting of Cookies and decide individually about their acceptance or exclude the acceptance of Cookies for certain cases or in general. If Cookies are not accepted, the functionality of our Website may be limited.

In addition, we use Cookies that allow an analysis of the surfing behavior of our website visitors (so-called analysis Cookies).

The following data is stored and transmitted, for example, in the analysis Cookies:

  • Page views
  • Use of website functions
  • Language setting

b.Legal basis of data processing

The legal basis for the processing of personal data using Cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal data using Cookies for analysis purposes is still Art. 6 para. 1 lit. a GDPR.

c.Purpose of data processing

Technically necessary Cookies serve to simplify the use of Websites. Some functions of the Website cannot be offered without the use of Cookies. For these, it is necessary that the Browser is recognized even after a page change.

The user data collected by technically necessary Cookies are not used to create user profiles.

The analysis Cookies are used to improve the quality of our Websites and their content. Through the analysis Cookies, we learn how the Website is used and can thus constantly optimize our offer.

d.Duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted by it. Therefore, users also have full control over the use of Cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of Cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If Cookies are deactivated for our Website, it may no longer be possible to use all functions of the Website to be used in full.

2. Contact form and e-Mail

a.Description and scope of data processing

We provide visitors to our Website with a contact form for quick, electronic contact. The data entered in the input mask will be transmitted to us and stored.

In addition, the IP address of the user as well as the date and time of the transmission are stored at the time of sending.

Alternatively, you can contact us via the provided E-Mail address. In this case, the user's personal data transmitted with the e-mail will be stored.

The data will not be passed on to third parties. The data will be used exclusively for processing the request.

b.Legal basis of data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR.

The legal basis for the processing of the data transmitted in the course of sending an e-Mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. B GDPR.

c.Purpose of data processing

The processing of personal data serves solely to process the contact. In the event of contact via e-Mail, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

d.Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

e.Objection and removal option

The user has the possibility to revoke his consent to the processing of personal data at any time. For this purpose, the user can contact the controller via the contact options provided on the Website. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

3. Comment function

a.Description and scope of data processing

We offer visitors to our Website the opportunity to make comments. The data entered in the input mask will be transmitted to us and stored.

In addition, the IP address of the user as well as the date and time of the transmission are stored at the time of sending.

The data will not be passed on to third parties. The data will be used exclusively for processing the request.

b.Legal basis of data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR, otherwise Art. 6 para. 1 lit. f GDPR.

c.Purpose of data processing

The processing of personal data serves to prevent misuse of the comment function (e.g. by bots) and to ensure the security of our information technology systems.

d.Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case at the latest when the comment or the corresponding page is deleted.

e.Objection and removal option

The user has the possibility to revoke his consent to the processing of personal data at any time. For this purpose, the user can contact the controller via the contact options provided on the Website.

4. Newsletter

a.Description and scope of data processing

Users have the opportunity to subscribe to our Newsletter on our Website. When registering for the Newsletter, The data requested from the input mask is transmitted to us.

In addition, the following data is collected during registration:

  • IP address of the applicant's computer
  • Date and time of registration

As part of the registration process, consent is obtained through a so-called Double Opt-in procedure.

If customers have purchased goods or services from us and have provided their e-Mail address, this can subsequently also be used to send a newsletter. In such a case, the Newsletter will only send direct advertising for your own similar goods or services.

b.Legal basis of data processing

The legal basis for the processing of data after registration for the Newsletter by the user is Art. 6 para. 1 lit. a GDPR.

The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 para. 3 UWG.

c.Purpose of data processing

The collection of the user's e-Mail address serves to deliver the Newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

d. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The E-Mail address of the user is therefore stored for as long as the subscription to the newsletter is active.

e.Objection and removal option

The subscription to the newsletter can be cancelled by the affected user at any time. For this purpose, a corresponding Link can be found in each Newsletter.

5. Newsletter tracking

a.Description and scope of data processing

The newsletters sent by US contain so-called tracking pixels. Tracking pixels are miniature graphics embedded in e-Mails sent in HTML format to enable log file recording and analysis. The personal data collected in this way will not be passed on to third parties. As part of the registration process, your consent is obtained by a so-called Double Opt-in procedure.

b.Legal basis of data processing

The legal basis for the processing of data after registration for the Newsletter is Art. 6 para. 1 lit. a GDPR, otherwise Art. 6 para. 1 lit. f GDPR.

c.Purpose of data processing

The newsletter Tracking serves the statistical evaluation of the success or failure of online Marketing campaigns. This allows us to understand whether and when an E-Mail is opened and which Links in the e-mail are clicked on. Newsletter Tracking also serves to improve and optimize the newsletter.

d.Duration of storage

Your data will be deleted if it is no longer necessary for our business processes and there are no legal retention obligations.

e.Objection and removal option

The consent of the affected user can be terminated at any time by the user unsubscribing from the Newsletter. For this purpose, for example, there is a corresponding Link in each Newsletter.

6. Input when ordering

a.Description and scope of data processing

Customers who want to use our services via our online Shop must re-enter their data with each order. Registration is neither possible nor necessary.

When placing an order, the data requested from the input mask is transmitted to us and stored.

The personal data may be transferred to third parties if this is necessary for the performance of the contract. These use the data passed on in this way exclusively for internal purposes, which are attributable to us. For more details, see Section III of this Privacy Policy.

b.Legal basis of data processing

If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 para. 1 lit. B GDPR.

The entries in the context of the guest order serve the implementation of pre-contractual measures; the legal basis for the processing of the data is Art. 6 para. 1 lit. B GDPR.

The legal basis for the processing of the data is also Art. 6 para. 1 lit. a GDPR.

c.Purpose of data processing

The registration of the user is required for the fulfilment of contracts with users or for the implementation of pre-contractual measures. The same applies to entries within the scope of the guest order.

Furthermore, the registration of the user is required for the provision of certain content and services on our Website.

d.Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

This is the case for the data collected during the registration process if the registration on our website is cancelled or changed.

This is the case for those during the registration process or the guest order process for the fulfilment of a contract or for the implementation of pre-contractual measures, if the data are no longer necessary for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

e.Objection and removal option

Users have the possibility to cancel the registration at any time. The stored data can be modified or modified by users themselves at any time.

You can find out how the registration can be deleted from the controller.

If the data is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

III.Transmission of data to third parties for the fulfilment of the contract

1. General

a.Description and scope of data processing

When ordering, we collect and use your personal data only insofar as this is necessary for the fulfilment and processing of your order as well as for the processing of your inquiries. The data entered by you during the order process will be passed on to service partners, which we need for the execution of the contractual relationship or service providers of which we are part within the scope of a Operation of order processing.

In addition to the recipients named in the respective clauses of this privacy policy, these are, for example, recipients of the following categories::

Shipping service providers, payment service providers, merchandise management service providers, order processing service providers, web hosts, IT service providers and Dropshipping retailers.

b.Legal basis of data processing

The processing described above serves the fulfilment of a contract to which the user is a party. The legal basis for the processing of data Art. 6 para. 1 lit. B GDPR. Further legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR.

c.Purpose of data processing

The transmission serves the fulfilment of our contractual obligations.

d.Duration of storage

Your data will be deleted if they are no longer required for the execution of the contract, unless contractual or statutory retention obligations conflict.

e.Objection and removal option

The user has the possibility at any time to revoke the consent given by the controller or the provider. It is not possible to revoke the processing of data that is absolutely necessary for the performance of the contract.

1. paypal (Plus)

a.Description and scope of data processing

If the user decides to pay with "PayPal" or "PayPal Plus" (purchase on account / credit card / direct debit) as part of your order process, the user's data is automatically transmitted to the payment service provider. By choosing PayPal as a payment option, the user consents to the transfer of personal data required for payment processing. Provider is PayPal (Europe) S. à.r. l. & Cie. S. C. A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. Data that is required for payment processing are transmitted. These are for example first name, last name, address, Email address, IP address, telephone number, mobile phone number, as well as order details. The privacy policy of PayPal is available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full retrievable.

b.Legal basis of data processing

If the use of the payment service provider serves the fulfilment of a contract to which the user is a party, the legal basis for the processing of the data is Art. 6 para. 1 lit. B GDPR.

The legal basis for the processing of the data is also Art. 6 para. 1 lit. a GDPR.

c.Purpose of data processing

The transmission takes place for payment processing, for abuse prevention, as well as for identity and credit check.

d.Duration of storage

Your data will be deleted if it is no longer necessary for our business processes and there are no legal retention obligations. We have no influence on the storage of data at the provider. You can reach the provider under the above contact details.

e.Objection and removal option

The user has the possibility to revoke the consent given to the provider or the controller at any time. A revocation of data that is absolutely necessary for payment processing is not possible.

2. Immediately

a.Description and scope of data processing

If the user decides to pay with Sofort as part of their order process, the user's data is automatically transmitted to the payment service provider. By choosing Sofort as a payment option, the user consents to the transfer of personal data required for payment processing. The provider is Sofort GmbH, Theresienhöhe 12, 80339 Munich. Data that is required for payment processing are transmitted. These are, for example, first name, Last name, address, Email address, IP address, telephone number, mobile phone number, PIN and TAN, as well as order details. Further information is available at https://www.klarna.com/sofort/.

b.Legal basis of data processing

If the use of the payment service provider serves the fulfilment of a contract to which the user is a party, the legal basis for the processing of the data is Art. 6 para. 1 lit. B GDPR.

The legal basis for the processing of the data is also Art. 6 para. 1 lit. a GDPR.

c.Purpose of data processing

The transmission takes place for payment processing, for abuse prevention, as well as for identity and credit check.

d.Duration of storage

Your data will be deleted if it is no longer necessary for our business processes and there are no legal retention obligations. We have no influence on the storage of data at the provider. You can reach the provider under the above contact details.

e.Objection and removal option

The user has the possibility to revoke the given consent at any time with Sofortüberweisung or with the responsible person. A revocation of data that is absolutely necessary for payment processing is not possible.

IV.Data transmission to service providers for the purpose of sending the newsletter

1. CleverReach

a.Description and scope of data processing

We use the CleverReach newsletter service for sending the newsletter and for e-mail Marketing. Provider cleverreach GmbH & co. KG, Mühlenstr is. 43, 26180 Rastede.

The following data is stored and processed by the provider, for example.

  • IP address
  • Page views and click behavior
  • Browser type and language
  • Hardware used by the user
  • Name and e-mail address

In addition, Cookies are set by the provider on the end devices of the users.

Further information on the storage of data can be found at https://www.cleverreach.com/de/datenschutz/, as well as here https://www.cleverreach.com/de/datensicherheit/

b.Legal basis for data processing

The legal basis for the processing of data after registration for the Newsletter by the user is Art. 6 para. 1 lit. a GDPR.

c.Purpose of data processing

Through the aforementioned data processing, we receive information that enables us to analyze the behavior of users. This enables us to optimize our newsletters and improve their display.

d.Duration of storage

Your data will be deleted if it is no longer necessary for our business processes and there are no legal retention obligations. We have no influence on the storage of data at the provider. You can reach the provider under the above contact details.

e.Opposition and removal options

Users can revoke their consent to the processing of personal data at any time with the controller or the provider. For this purpose, the user must contact the controller or the provider via the communication channels provided. This can also cause the data to be deleted from the provider.

In addition, users have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be automated. If cookies are disabled for our website, you may not be able to use all the functions of the website to their full extent.

V.Data transmission to the purpose of use analysis

1. Google Analytics

a.Description and extent of data processing

This website uses the web analytics service Google Analytics Provider is the Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Analytics uses analytics cookies. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. We extend the Google Analytics code by the code "gat. _anonymizeIp ();". This code means that the logged IP address of Google within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area will be shortened prior to the transfer. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of the use of Google Analytics will not be merged with other data held by Google. For more information, see https://www.google.com/analytics/terms/de.html or Under https://policies.google.com/?hl=de.

b.Legal basis of data processing

The legal basis for the processing of the personal data of the users is Art. 6 para. 1 lit. f DSGVO.

c.Purpose of data processing

The processing of the personal data of the users allows us to analyze the surfing behaviour of our users. We are in a position to compile information on the use of the individual components of our website in the analysis of the data obtained. This helps us to improve our website and its user-friendliness. This is also our legitimate interest in the processing of the data in accordance with Art. 6 (1) (lit). f DSGVO. The anonymization of the IP address takes sufficient account of the interest of the users in their protection of personal data.

d.Duration of storage

Your data will be deleted if these are no longer required for our business processes and do not prevent any statutory retention obligations.

We have also determined that Google will automatically delete the data after 26 months.

e.Opposition and disposal

Cookies are stored on the user's computer and transmitted by the user. Therefore, users also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be automated. If cookies are disabled for our website, you may not be able to use all the functions of the website to their full extent.

You can also record the data generated by the cookie and related to your use of the website (incl. Your IP address) to Google as well as the processing of this data by Google prevent by using the browser Add-On at https://tools.google.com/dlpage/gaoptout?hl=de download and install.

For an opt-out when using mobile devices, the following link must: Disable Google Analytics to be clicked from any mobile device.

 

VI.Data transmission for advertising purposes

1. Google Adwords/Google Ads

a.Description and extent of data processing

On our website, we have integrated Google AdWords. The provider is the Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA operated.

Through the use of Google AdWords, the application of our website is made possible by the insertion of interest-relevant advertising on the Internet pages of third-party companies and in the search engine results of the search engine Google and an admitting of third-party advertising on our website. If a user clicks on a Google Ad-Words display, a conversion cookie is stored on the user's computer. Conversion cookies do not serve to identify the users. Conversion cookies are used to understand which sub-pages have been retrieved on our website, whether a turnover has been generated or cancelled. The personal data will be stored by Google in the USA. Google may also pass these on to third parties.

b.Legal basis of data processing

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f DSGVO. The legal basis for the processing of personal data using cookies for analysis purposes is in the presence of the user's consent in this respect Art. 6 (1) (lit). a GDPR.

c.Purpose of data processing

Google AdWords allows ads to be viewed in Google's search engine results, as well as in the Google advertising network. For this purpose, we set keywords by means of which a display in Google's search engine results will be displayed only if the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are distributed on topic-relevant internet pages using an automatic algorithm and with due regard to the previously defined keywords. The data we have gained will help us to optimize our ads.

a.Duration of storage

Your data will be deleted if these are no longer required for our business processes and do not prevent any statutory retention obligations. We do not have any influence on the storage of data from the provider. You can reach the provider under the above mentioned contact details.

b.Possibility of revocation and removal

Cookies are stored on the user's computer and transmitted by the user. Therefore, users also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be automated. If cookies are disabled for our website, you may not be able to use all the functions of the website to their full extent.

In addition, the person concerned is able to object to the interest-related advertising by Google. To do this, the data subject must go to the www.google.de/settings/ads link from each of the Internet browsers used by it and make the desired settings there.

In addition, the person concerned is able to object to the interest-related advertising by Google. To do this, the data subject must go to the www.google.de/settings/ads link from each of the Internet browsers used by it and make the desired settings there.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/.

VII.Data transmission to improve page functionality

1. Google Fonts

a.Description and extent of data processing

This website uses external fonts, so-called external fonts. Google Fonts. Provider is the Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

When the website is called up, the fonts files are loaded by the server of Google Inc. These servers can also be located in the United States. In this case, for example, it is transmitted which pages the user has called, and which IP address has the terminal of the user.

For more information, see https://developers.google.com/fonts/faq?hl=de-DE&csw= or Under https://policies.google.com/?hl=de.

b.Legal basis of data processing

The legal basis for the processing of the personal data of the users is Art. 6 para. 1 lit. f DSGVO.

c.Purpose of data processing

We do not receive any information or evaluations about the data collected from Google Inc. and do not have the possibility to control it.

By using the Google Fonts, the presentation and display of the website is improved and optimized.

d.Duration of storage

We do not have any influence on the storage of data from the provider. You can reach the provider under the above mentioned contact details.

e.Possibility of revocation and removal

We are not aware of any possibilities of revocation and disposal.

VIII.Rights of the persons concerned

1. Right to information

Any person affected by the processing of personal data may require the controller to confirm whether personal data of the person concerned is processed.

If such processing is available, you can request information from the person responsible for the following information:

  • Processing
  • Categories of personal data that are processed
  • Receiver or the categories of recipients to whom the personal data in question have been disclosed or are still being disclosed
  • the planned duration of the storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period
  • Existence of a right to rectify or delete the personal data concerning you, a right to restrict the processing by the controller or an objection right against this processing
  • The existence of a right of appeal to a supervisory authority
  • all available information on the origin of the data, if the personal data are not collected from the data subject
  • The existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) of the GDPR and-at least in those cases-meaningful information on the logic involved, as well as the scope and the desired effects of such processing for the data subject
  • The person concerned shall also be entitled to request information as to whether the personal data concerning them are transferred to a third country or to an international organisation. In this context, you may ask for the appropriate guarantees in accordance with. Art. 46 GDPR shall be notified in connection with the transmission.
  • In the case of data processing for scientific, historical or statistical research purposes:
    • This right of access may be limited to the extent that it is likely to make the implementation of the research or statistical purposes impossible or seriously compromised and that the restriction is necessary for the performance of research or statistical purposes.

2. Right to rectification

Persons concerned shall have the right to rectification and/or completion to the person responsible, provided that the personal data processed, which concern them, are inaccurate or incomplete. The person responsible shall make the corrigendum immediately.

In the case of data processing for scientific, historical or statistical research purposes:

Your right to rectification may be limited to the extent that it is likely to make the implementation of the research or statistical purposes impossible or seriously compromised and that the restriction is necessary for the performance of the research or statistical purposes.

3. Right to restrict processing

Subject to the following conditions, data subjects may request the restriction of the processing of the personal data concerning you:

  • if the accuracy of the person concerned is denied for a period of time which enables the person responsible to verify the accuracy of the personal data
  • the processing is unlawful and the data subject rejects the erasure of the personal data and instead requires the restriction of the use of the personal data
  • the controller no longer requires the personal data for the purposes of the processing, but the data subject requires it to assert, exercise or defend legal claims, or
  • if the data subject has appealed against the processing in accordance with Article 21 (1) of the GDPR and has not yet been determined whether the legitimate grounds of the person responsible outweigh the reasons for the person concerned.

If the processing of the personal data concerned has been restricted, such data may be processed-except for its storage-only with the consent of the data subject or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.

If the restriction of the processing has been restricted according to the above conditions, the data subject shall be informed by the person responsible before the restriction is lifted.

In the case of data processing for scientific, historical or statistical research purposes:

The right of the data subject to be restricted to processing may be limited to the extent that it is likely to make the achievement of the research or statistical purposes impossible or seriously compromised and that the restriction is necessary for the performance of the research or statistical purposes.

4. Right to Delete

a.Deletion duty

The data subject may require the person responsible to delete the personal data concerning him without delay and the person responsible shall be obliged to delete such data without delay, provided that one of the following reasons is correct:

  • the personal data in question are no longer necessary for the purposes for which they have been collected or otherwise processed;
  • the person concerned has his/her consent to the processing in accordance with the following conditions: Art. 6 (1) (lit). a or Art. 9 para. 2 lit. a DSGVO revocation and lack of any other legal basis for processing;
  • The data subject shall be placed in accordance with Article 21 (1) GDPR objection to the processing and there are no overriding legitimate reasons for the processing, or the data subject is placed in accordance with the provisions of the German Data Protection Act. Article 21 (2) of the GDPR objection to processing;
  • the personal data have been processed unlawfully;
  • the erasure of the personal data in question is necessary for the fulfilment of a legal obligation under Union law or the law of the Member States to which the controller is subject;
  • the personal data concerned have been collected in relation to the services offered by the information society in accordance with Article 8 (1) of the GDPR.

b.Information to third parties

If the person responsible has made public the personal data in question, he is in accordance with. Pursuant to Article 17 (1) of the GDPR, it shall take appropriate measures, including technical measures, in the light of available technology and implementation costs, in order to inform data controllers who process the personal data that you, as the data subject, have requested the deletion of all links to these personal data, or from copies or replications of such personal data.

c.Exceptions

The right to be deleted does not exist as far as the processing is required

  • on the exercise of the right to freedom of expression and information;
  • for the performance of a legal obligation which requires processing under the law of the Union or of the Member States to which the controller is subject, or in order to carry out a task in the public interest or in the exercise of public authority which has been delegated to the controller:
  • for reasons of public interest in the field of public health in accordance with Article 9 (2) (lit). h and i as well as Art. 9 (3) GDPR;
  • for archival purposes in the public interest, scientific or historical research purposes, or for statistical purposes in accordance with. Article 89 (1) of the GDPR, in so far as the right referred to in Section (a) is likely to render impossible or seriously impair the attainment of the objectives of such processing, or
  • for the assertion, exercise or defence of legal claims.

5. Right to be informed

If the data subject has asserted the right to rectification, erasure or restriction of processing in relation to the person responsible, the person concerned shall be obliged to inform all recipients who have been exposed to the personal data concerned of this correction or deletion of the data or restriction of the processing, unless this proves to be impossible or involves a disproportionate effort. The person concerned shall have the right to be informed of such recipients.

6. Right to data portability

Affected persons have the right to obtain the personal data concerning them, which have been provided to the person responsible, in a structured, common and machine-readable format. In addition, data subjects have the right to submit such data to another non-disability controller by the person responsible for the provision of the personal data, provided that:

  • the processing on a consent according to. Art. 6 (1) (lit). a GDPR or Art. 9 para. 2 lit. a GDPR or a contract in accordance with Art. 6 (1) (lit). b GDPR, and
  • processing is carried out using automated procedures.

In the exercise of this right, persons concerned shall also have the right to ensure that the personal data relating to them are transmitted directly by a person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons may not be affected thereby.

The right to data portability does not apply to the processing of personal data which is necessary for the performance of a task in the public interest or in the exercise of public authority which has been entrusted to the controller.

7. Right of appeal

Persons concerned shall have the right, for reasons arising from their particular situation, at any time against the processing of the personal data relating to them, which is based on Article 6 (1) (1) (1). e or f GDPR shall be subject to opposition; this shall also apply to profiling based on these provisions.

The responsible person shall no longer process the personal data in question, unless he can demonstrate compelling legitimate grounds for the processing which the interests of the persons concerned, their rights and freedoms outweigh, or the processing serves the assertion, exercise or defence of legal claims.

If the personal data in question are processed in order to operate direct advertising, data subjects have the right to object at any time to the processing of the personal data concerning them for the purpose of such advertising; this also applies to profiling, insofar as it is in connection with such direct advertising.

If the persons concerned object to the processing for direct marketing purposes, the personal data relating to them shall no longer be processed for such purposes.

Persons concerned may, in connection with the use of information society services, notwithstanding Directive 2002 /58/EC, exercise their right of objection by means of automated procedures using technical specifications.

In the case of data processing for scientific, historical or statistical research purposes:

Affected persons also have the right, for reasons arising from your particular situation, to process personal data relating to them, for scientific or historical research purposes or for statistical purposes in accordance with the provisions of this Regulation. Article 89 (1) of the GDPR is to be contradicted.

The right of objection may be limited to the extent that it is likely to make the realization of the research or statistical purposes impossible or seriously compromised and the restriction necessary for the performance of the research or statistical purposes is necessary.

8. Right of revocation of the data protection consent declaration

Affected persons have the right to revoke their data protection consent declaration at any time. The revocation of the consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

9. Automated decision in individual cases including profiling

Persons concerned shall have the right not to be subject to a decision based solely on automated processing, including profiling, which unfolds in relation to this legal effect or significantly affects them in a similar manner. This shall not apply if the decision

  1. is required for the conclusion or the performance of a contract between the person concerned and the person responsible
  2. may be allowed under the legislation of the Union or of the Member States to which the controller is subject, and shall contain appropriate measures for the protection of the rights and freedoms of the persons concerned and their legitimate interests, or
  3. with express consent

However, these decisions may not be based on specific categories of personal data in accordance with Art. 9 (1) GDPR, unless Art. 9 (2) (lit). a or g of GDPR, and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases referred to in points 1 and 3, the controller shall take appropriate measures to safeguard the rights and freedoms and the legitimate interests of persons concerned, including at least the right to act on the part of a person responsible, the presentation of his/her own position and the decision to challenge him.

10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, persons concerned shall have the right to complain to a supervisory authority, in particular in the Member State of their place of stay, their place of work or the place of the alleged infringement, if they believe that the processing of the personal data concerning them is in breach of the GDPR.

The supervisory authority in which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including: the possibility of judicial redress under Art. 78 GDPR.